The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a phone handset loses connection, due to an improper pairing mechanism. A successful exploit could allow an attacker to eavesdrop on conversations.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mivoice_6940_firmware | Mitel | * | 1.5.3 (excluding) |